Use this dialog box when creating or modifying a firewall rule to configure criteria based on Internet Control Message Protocol (ICMP).

How to get to this dialog box

All ICMP types

Select this option to specify that any message using ICMP matches the rule.

Specific ICMP types

Select this option to select one or more ICMP message types. Select the message types to which you want to apply the rule.

This ICMP type

Use this option to specify an ICMP message type that is not provided in Specific ICMP types. This option is enabled only if you select Specific ICMP types. Click Add to add the type to the list.


This is a number that correlates to an ICMP message type. For example, 3 is the number for the "Destination Unreachable" message. The message type is an integer from 0 to 255.


This is a number that correlates to a code for an ICMP message type. These codes are details that are useful for troubleshooting and understanding the circumstances that prompted the sending of the message. The same code number can mean different things for different message types. For example, 3 is the code for "Port Unreachable" for the "Destination Unreachable" message, but it is also the code for "Redirect Datagram for the Type of Service and Host" for the "Redirect" message type.

The code can be an integer from 0 to 255, or the value Any.

By combining the message type and code, you can specify very detailed criteria for the exception. This can be useful when you need to make sure specified ICMP messages pass through Windows Firewall with Advanced Security for remote troubleshooting, while other ICMP messages are blocked.

See Also